Java Code Examples for org.openid4java.association.Association#createHmacSha1()

/**
 * Generates an Association object from an Association Response.
 *
 * @param dhSess        The Diffie-Helman session containing the private key
 *                      used to encrypt / decrypt the MAC key exchange.
 *                      Should be null for no-encryption sessions.
 */
public Association getAssociation(DiffieHellmanSession dhSess)
        throws AssociationException
{
    if (DEBUG) _log.debug("Retrieving MAC key from association response...");

    String handle = getParameterValue("assoc_handle");
    int expiresIn = Integer.parseInt(
            getParameterValue("expires_in") );

    // get (and decrypt) the MAC key
    byte[] macKey;

    AssociationSessionType type = getType();

    if ( type.getHAlgorithm() != null )
    {
        macKey = dhSess.decryptMacKey(
                getParameterValue("enc_mac_key"),
                getParameterValue("dh_server_public") );
        if (DEBUG) _log.debug("Decrypted MAC key (base64): " +
                              new String(Base64.encodeBase64(macKey)));
    }
    else
    {
        macKey = Base64.decodeBase64(
                getParameterValue("mac_key").getBytes() );

        if (DEBUG) _log.debug("Unencrypted MAC key (base64): "
                              + getParameterValue("mac_key"));
    }

    Association assoc;

    if (Association.TYPE_HMAC_SHA1.equals(type.getAssociationType()))
        assoc = Association.createHmacSha1(handle, macKey, expiresIn);

    else if (Association.TYPE_HMAC_SHA256.equals(type.getAssociationType()))
        assoc = Association.createHmacSha256(handle, macKey, expiresIn);

    else
        throw new AssociationException("Unknown association type: " + type);

    if (DEBUG) _log.debug("Created association for handle: " + handle);

    return assoc;
}
 

public Association load ( String opUrl, String handle )
{		
	try
	{
		JdbcTemplate jdbcTemplate = getJdbcTemplate ( ) ;

		Map res = jdbcTemplate.queryForMap ( _sqlSelect, new Object[]
			{ opUrl, handle } ) ;

		String type = (String) res.get ( "type" ) ;
		String macKey = (String) res.get ( "mackey" ) ;
		Date expDate = (Date) res.get ( "expdate" ) ;

		if ( type == null || macKey == null || expDate == null )
			throw new AssociationException (
												"Invalid association data retrived from database; cannot create Association "
														+ "object for handle: "
														+ handle ) ;

		Association assoc ;

		if ( Association.TYPE_HMAC_SHA1.equals ( type ) )
			assoc = Association.createHmacSha1 (	handle,
													Base64.decodeBase64 ( macKey.getBytes ( ) ),
													expDate ) ;

		else if ( Association.TYPE_HMAC_SHA256.equals ( type ) )
			assoc = Association.createHmacSha256 (	handle,
													Base64.decodeBase64 ( macKey.getBytes ( ) ),
													expDate ) ;

		else
			throw new AssociationException (
												"Invalid association type "
														+ "retrieved from database: "
														+ type ) ;

		if ( _log.isDebugEnabled ( ) )
			_log.debug ( "Retrieved association for handle: " + handle
							+ " from table: " + _tableName ) ;

		return assoc ;
	}
	catch ( AssociationException ase )
	{
		_log.error ( "Error retrieving association from table: "
						+ _tableName, ase ) ;
		return null ;
	}
	catch ( IncorrectResultSizeDataAccessException rse )
	{
		_log.warn ( "Association not found for handle: " + handle
					+ " in the table: " + _tableName ) ;
		return null ;
	}
	catch ( DataAccessException dae )
	{
		_log.error ( "Error retrieving association for handle: " + handle
						+ "from table: " + _tableName, dae ) ;
		return null ;
	}
}
 

public Association load ( String opUrl )
{		
	try
	{
		JdbcTemplate jdbcTemplate = getJdbcTemplate ( ) ;

		Map res = jdbcTemplate.queryForMap ( _sqlSelectAlt, new Object[]
			{ opUrl } ) ;

		String handle = (String) res.get ( "handle" ) ;
		String type = (String) res.get ( "type" ) ;
		String macKey = (String) res.get ( "mackey" ) ;
		Date expDate = (Date) res.get ( "expdate" ) ;

		Association assoc ;

           if ( expDate == null || ( type == null || macKey == null ) &&
                ! Association.FAILED_ASSOC_HANDLE.equals(handle) ) {
			throw new AssociationException (
												"Invalid expiry date retrived from database; cannot create Association "
														+ "object for handle: "
														+ handle ) ;

           } else if (Association.FAILED_ASSOC_HANDLE.equals(handle)) {
               assoc = Association.getFailedAssociation(expDate);

           } else if ( Association.TYPE_HMAC_SHA1.equals ( type ) ) {
			assoc = Association.createHmacSha1 (	handle,
													Base64.decodeBase64 ( macKey.getBytes ( ) ),
													expDate ) ;

           } else if ( Association.TYPE_HMAC_SHA256.equals ( type ) ) {
			assoc = Association.createHmacSha256 (	handle,
													Base64.decodeBase64 ( macKey.getBytes ( ) ),
													expDate ) ;

           } else {
			throw new AssociationException (
												"Invalid association type "
														+ "retrieved from database: "
														+ type ) ;

           }

		if ( _log.isDebugEnabled ( ) )
			_log.debug ( "Retrieved association for handle: " + handle
							+ " from table: " + _tableName ) ;

		return assoc ;
	}
	catch ( AssociationException ase )
	{
		_log.error ( "Error retrieving association from table: "
						+ _tableName, ase ) ;
		return null ;
	}
	catch ( IncorrectResultSizeDataAccessException rse )
	{
		_log.warn ( "Association not found for opUrl: " + opUrl
					+ " in the table: " + _tableName ) ;
		return null ;
	}
	catch ( DataAccessException dae )
	{
		_log.error ( "Error retrieving association for opUrl: " + opUrl
						+ "from table: " + _tableName, dae ) ;
		return null ;
	}
}
 

public Association load(String handle)
{
    try
    {
        String sql = "SELECT type,mackey,expdate FROM " + _tableName +
                " WHERE handle=?";

        JdbcTemplate jdbcTemplate = getJdbcTemplate();

        Map res = jdbcTemplate.queryForMap(sql, new Object[] {handle});

        String type = (String) res.get("type");
        String macKey = (String) res.get("mackey");
        Date expDate = (Date) res.get("expdate");

        if (type == null || macKey == null || expDate == null)
            throw new AssociationException("Invalid association data " +
                    "retrived from database; cannot create Association " +
                    "object for handle: " + handle);

        Association assoc;

        if (Association.TYPE_HMAC_SHA1.equals(type))
            assoc = Association.createHmacSha1(handle,
                    Base64.decodeBase64(macKey.getBytes() ), expDate);

        else if (Association.TYPE_HMAC_SHA256.equals(type))
            assoc = Association.createHmacSha256(handle,
                    Base64.decodeBase64(macKey.getBytes() ), expDate);

        else
            throw new AssociationException("Invalid association type " +
                    "retrieved from database: " + type);

        if (DEBUG)
            _log.debug("Retrieved association for handle: " + handle +
                       " from table: " + _tableName);

        return assoc;
    }
    catch (AssociationException ase )
    {
        _log.error("Error retrieving association from table: " + _tableName, ase);
        return null;
    }
    catch (IncorrectResultSizeDataAccessException rse)
    {
        _log.warn("Association not found for handle: " + handle +
                  " in the table: " + _tableName);
        return null;
    }
    catch (DataAccessException dae)
    {
        _log.error("Error retrieving association for handle: " + handle +
                   "from table: " + _tableName, dae);
        return null;
    }
}
 

/**
 * Builds the Association object
 *
 * @param results
 * @return <code>Association</code>
 * @throws SQLException
 */
private synchronized Association buildAssociationObject(ResultSet results) {

    Association assoc = null;
    String assocHandle = null;

    try {

        assocHandle = results.getString(1);
        String assocType = results.getString(2);
        java.util.Date expireIn = new java.util.Date(results.getTimestamp(3).getTime());
        String macKey = results.getString(4);
        String assocStore = results.getString(5);

        // we check if params are missing
        if (assocHandle == null || assocType == null || expireIn == null || macKey == null || assocStore == null) {
            log.error("Required data missing. Cannot build the Association object");
            return null;
        }

        // Here we check if we are loading the correct associations
        if (associationStore.equals(OpenIDServerConstants.ASSOCIATION_STORE_TYPE_PRIVATE) &&
            assocStore.equals(OpenIDServerConstants.ASSOCIATION_STORE_TYPE_SHARED)) {
            log.error(
                    "Invalid association data found. Tried to load a Private Association but found a Shared Association");
            return null;
        } else if (associationStore.equals(OpenIDServerConstants.ASSOCIATION_STORE_TYPE_SHARED) &&
                   assocStore.equals(OpenIDServerConstants.ASSOCIATION_STORE_TYPE_PRIVATE)) {
            log.error(
                    "Invalid association data found. Tried to load a Shared Association but found a Private Association");
            return null;
        }

        // Checks for association handle
        if (Association.TYPE_HMAC_SHA1.equals(assocType)) {
            assoc = Association.createHmacSha1(assocHandle, Base64.decode(macKey), expireIn);

        } else if (Association.TYPE_HMAC_SHA256.equals(assocType)) {
            assoc = Association.createHmacSha256(assocHandle, Base64.decode(macKey), expireIn);

        } else {
            log.error("Invalid association type " + assocType + " loaded from database");
            return null;
        }

    } catch (SQLException e) {
        log.error("Failed to build the Association for " + assocHandle + ". Error while accessing the database.",
                  e);
    } finally {
        IdentityDatabaseUtil.closeResultSet(results);
    }

    log.debug("Association " + assocHandle + " loaded successfully from the database.");
    return assoc;
}
 

/**
 * Read entries from the cache. If no value found then returns null.
 * If the association is expired then returns null.
 * Else returns the <code>Association</code>
 *
 * @param handle
 * @return <code>Association<code>
 */
public Association getFromCache(String handle) {

    if(IdentityUtil.isBlank(handle)){
        throw new IllegalArgumentException("Handle is \'NULL\'");
    }
    OpenIDIdentityCacheKey cacheKey = new OpenIDIdentityCacheKey(0, handle);
    OpenIDIdentityCacheEntry cacheEntry = associationCache.getValueFromCache(cacheKey);
    if (cacheEntry != null) {
        if (log.isDebugEnabled()) {
            log.debug("Cache hit for handle : " + handle);
        }
        Date expiry = cacheEntry.getDate();
        String type = cacheEntry.getCacheEntry();
        Key secretKey = cacheEntry.getSecretKey();
        if(Association.TYPE_HMAC_SHA1.equals(type)){
            return Association.createHmacSha1(handle, secretKey.getEncoded(), expiry);
        } else if(Association.TYPE_HMAC_SHA256.equals(type)) {
            return Association.createHmacSha256(handle, secretKey.getEncoded(), expiry);
        } else {
            throw IdentityRuntimeException.error("Invalid algorithm " + type);
        }

        /*
         * We are not removing expired handles from the cache. If we
         * do, then at a lookup for a expired search, it will fall
         * back to a database lookup which costs a lot. JCache
         * should remove an entry if an entry was never called.
         *
         * if(association.hasExpired()){
         * associationCache.removeCacheEntry(handle);
         * if(log.isDebugEnabled()){
         * log.debug("Expired entry in cache for handle : " +
         * handle); } } else { return association; }
         */
    } else {
        if (log.isDebugEnabled()) {
            log.debug("Cache miss for handle : " + handle);
        }
        return null;
    }
}